From a456e5182cd6495b8e8d6ae0f49b557c9240f848 Mon Sep 17 00:00:00 2001 From: glitsj16 Date: Tue, 5 Mar 2024 17:20:34 +0000 Subject: New profile: green-recoder.profile (#6237) Simple screen recorder for Linux desktop, supports Wayland & Xorg. https://github.com/dvershinin/green-recorder https://aur.archlinux.org/packages/green-recorder https://aur.archlinux.org/packages/green-recorder-git --- etc/inc/disable-programs.inc | 1 + etc/profile-a-l/green-recoder.profile | 72 +++++++++++++++++++++++++++++++++++ src/firecfg/firecfg.config | 1 + 3 files changed, 74 insertions(+) create mode 100644 etc/profile-a-l/green-recoder.profile diff --git a/etc/inc/disable-programs.inc b/etc/inc/disable-programs.inc index 914964b63..26f11470f 100644 --- a/etc/inc/disable-programs.inc +++ b/etc/inc/disable-programs.inc @@ -482,6 +482,7 @@ blacklist ${HOME}/.config/google-chrome-beta blacklist ${HOME}/.config/google-chrome-unstable blacklist ${HOME}/.config/gpicview blacklist ${HOME}/.config/gramps +blacklist ${HOME}/.config/green-recorder blacklist ${HOME}/.config/gthumb blacklist ${HOME}/.config/gummi blacklist ${HOME}/.config/guvcview2 diff --git a/etc/profile-a-l/green-recoder.profile b/etc/profile-a-l/green-recoder.profile new file mode 100644 index 000000000..77c980daa --- /dev/null +++ b/etc/profile-a-l/green-recoder.profile @@ -0,0 +1,72 @@ +# Firejail profile for green-recorder +# Description: A simple screen recorder for Linux desktop (supports Wayland & Xorg) +# This file is overwritten after every install/update +# Persistent local customizations +include green-recorder.local +# Persistent global definitions +include globals.local + +blacklist /usr/libexec + +noblacklist ${HOME}/.config/green-recorder + +# Allow python 3 (blacklisted by disable-interpreters.inc) +include allow-python3.inc + +# Allow /bin/sh (blacklisted by disable-shell.inc) +include allow-bin-sh.inc + +noblacklist ${VIDEOS} + +include disable-common.inc +include disable-devel.inc +include disable-exec.inc +include disable-interpreters.inc +include disable-programs.inc +include disable-shell.inc +include disable-xdg.inc + +mkdir ${HOME}/.config/green-recorder +whitelist ${HOME}/.config/green-recorder +whitelist ${DOWNLOADS} +whitelist ${VIDEOS} +whitelist /usr/share/ffmpeg +whitelist /usr/share/green-recorder +include whitelist-common.inc +include whitelist-run-common.inc +include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc +include whitelist-var-common.inc + +apparmor +caps.drop all +net none +nodvd +nogroups +noinput +nonewprivs +noprinters +noroot +notv +nou2f +novideo +protocol unix +# allow set_mempolicy, which is required to encode using libx265 +seccomp !set_mempolicy +seccomp.block-secondary +tracelog + +disable-mnt +private-bin awk,bash,convert,ffmpeg,green-recorder,grep,mv,pactl,ps,python*,sh,sleep,xdg-open,xdpyinfo,xwininfo +private-cache +private-dev +private-etc @x11 +private-tmp + +dbus-user filter +dbus-user.talk org.freedesktop.Notifications +dbus-user.talk org.gnome.Shell.* +?ALLOW_TRAY: dbus-user.talk org.kde.StatusNotifierWatcher +dbus-system none + +restrict-namespaces diff --git a/src/firecfg/firecfg.config b/src/firecfg/firecfg.config index e3a2f5200..5cf5947ed 100644 --- a/src/firecfg/firecfg.config +++ b/src/firecfg/firecfg.config @@ -391,6 +391,7 @@ gpredict gradio gramps gravity-beams-and-evaporating-stars +green-recorder gthumb gtk-lbry-viewer gtk-pipe-viewer -- cgit v1.2.3-54-g00ecf